CVE-2025-10268

Medium · 5.3

CVSS

5.3

EPSS

0.4%

Published

Jun 26, 2026

CISA due date

—

The record

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin through 2.4.8 is vulnerable to path traversal which makes it possible for the attacker to retrieve the directory listing for arbitrary directories on the server.

Affected packages

Ecosystem	Package	Introduced	Fixed